Analysis
-
max time kernel
122s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20241010-en -
resource tags
-
submitted
20/11/2024, 02:22
General
-
Target
ExLaµñch€r/ExLaüncher.rar
-
Size
14.7MB
-
MD5
a463e72d866bb5c9b2dc90bd64f1576f
-
SHA1
f1c4c8626d64e9606f6f06ea57c8cbbe46c9b193
-
SHA256
f56c93e89cae6885c601290564ab0d12e08c38a52ca15c3cdcccb2650aa4043c
-
SHA512
87b03112d4030444b1006eee1df11435a2d75c709eb223c5361e2fc726b2b68a7cc25e634043c13a4d9c595779368eda2822ba01a290bcecb5ecff3f8be96a20
-
SSDEEP
393216:t6UnSk/SIdzSgjITuONl95AUUl5GTUOdUt2MZj0IW8ZvC2o25F:Iy/tS95l9Kl4TmZ4p89HF
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Program Files\7-Zip\7zFM.exe"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\ExLaµñch€r\ExLaüncher.rar"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow